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mm%] mmm 

* z«*mmnt%.mL. pzm&t.b. x>p-e&sxK*fLT. x* (2 

* n) aod p zttw.t&mmmmjjmizm^z. xtimzx. &pz 

- %Mt&fctbiZ&mftft%\Z*; hBtfcn, AMx Sfc&lC#M&ey 
h££mfcU A£lt£x* (2 * n) nod ?\Z$m& Zfetz^ 2*(2m+n)a 
odP&ffg-**^ *SV>ii^mStTfe^> J E>^U!H*m»tCj:»;xl 
= x * 2 " (2m+n) * (2 * (-m) ) nod P= x * 2 " (m+n) aod P 
&ff&U ££>Cx2:=xl* (2* (-m))aodP= x * (2 * n) aod 
PfefHt-tftifcCJ:*;, x aod PZ®iZ*tbZZ£teLlZx* (2'n) no 

[»#*2] 

" fc £11 U P&*»fcU x>PT*fe5xtcMUT. x* (2 

* n) aod p zttntzmm&mxmzte^T. &zp* xiimzx. &p& 

h&ZmtL. AjlUZx* (2 * n) aod P£geg|-r-5|gtc, 2 " (m+2n) a 
od PfctMTr*;*, fcSWi^toJg&LTfc^, ^>=f^Uif^Sl^^tCJ:*J 
xl=x*2* (m+2n) * (2* (-m) ) aod P= x * 2 * (2n) aod 
P£ff»U 3e»{Cx2 : = x 1 * (2 * (-n) ) aod P=x* (2 * n) ao 
d Pfctfifr*it»Cj:y % x aod PZ®lZ*lt>ZZ.£teUZx* (2*n) a 

&£P, A^ffi&x, aPfcfc|frr*fc»JC£«»£jfelfy h»&n, A£& 
h^ofcygLTstfy hfc©^*mSIJI©|g*&£/aUT, x*d mod 
©i#B©*S»&d[i]fcl,£i:^ x * d [i]nodP&$£f aftfcUlC (2*n 



ffigE** 2003-3044975 



#2 003-0 14136 



) * (2 * s-1) *x *d[i]«od PZM^Ttiim&ft^K (2*n) * (2 * 
n-1) *x * d mod P&ff&Lfcg, 2 * (-n) * (2 * n-1) m 
od Pfc^CT, x*d mod P fctf*t*£fc Zftntt&timmmjj 

m. 

[0 0 0 1] 

mmaM't&ijm&m 

* > A £ ft iz m ? Z> =fc tf> T* & £ . 

[0 0 0 2] 

RSACD^&&g#&0)CRT(Chinese Remainder Theory) ft&0 
-#«»0Xf»;^x »od pfctfJTf*. CRTStg#^©&Ji#jE£@i £ 

^■f. *?\ p-eSjcLfe«^LTsg^if^m$:ff^ (1010), q r- 

STcU^fltC^f S^$^iI^SI^$:^f ^ (1 0 2 0) . S&K2o©^£^$J 
&mm8&Z&f&.b (1 0 3 0) **$«r*jfcj&&fc*. p T«tc L 

«f^s**» (ioio) ^^qvmTtb^mo^mm^mn. u 020 

[0 0 0 3] 

1 0 1 0, 1 0 20©/<^tf#tC«ii^ 7fYi/a>fi>f>fa^^ 
£. 7f-fi/a>fi^>i:lt fc£Atf, Z=a*L £ffg-rs*§£\ *SBtL£- 

L=L[n-l]*2*(n-l)+L[n-2]*2"(n-2)+ - +L[1]*2"1+L[0]*2*0 (5<U ) 

tmz. mmoMmmmz&y, &&o>mmtf **tm*cfc* t^$&&mm 

ZP&^T, Z = A * L <Z)ftg£ 

Z := (-( ( (A'L(n-l])*2 * (A*L[n-2]) )"2 * * (A*L(0]) (^2) 
£33 <. A*L[i]«U L[i]*n?**itf, A£fc»J. L[i]=0 A* 0=1 £.&>) 
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Z= 1 

for ( i = n-l ; i >= 0 ; i++ ) { 
W := W * »: 

if ( L[i]«l ) then Z:=Z * A; else * U 

' } 

[0 0 0 4] 

VXD 2 O £ i £ £ 5 . 
[0 0 0 5] 

02 U 8I&m»&M^k££-0>7-r>r S/a >^x>f >JC<kS^tm 

£1% PC*** 5x©»^2 0 2 «e>:f;fty 

©SJC2'(-n) mod P tfUHf e>*lS feat), ^«t>2'n£&§[3|&Kfj|CT33 < . WT 

s R=2*ni:fe< 0 «fc»»!CR y*J&SI#fc/8v*$ 

xR mod p (2 0 4 0) . ^>=r>l U *J&aiJ*fcJ|Vx*<8T?, ®M<M9iM 

f&"£1-£ (2 0 5 0) . »R±tfc£y hfr*>m\Zl jfaZoT^Sa^^&ll^ 
(2 0 6 0), Of&tltf, 1 ZMfttZRZmV (2 0 7 0) , ltftftoT^ 
Jltf, xR mod P(=AR)£WfCj£CS (2 0 8 0) . 1 fc&UfctS R £5H 2 

o7oii, tf**s*tciB»*#**v*©-e, «ta»s^mmf«>#^«^BS«rii 

T*&6„ KT»y SOfia*^>tJf$: 1 £y h##lfrL (2 0 9 0) , HTftt?? h 
*T'fc£U;i^TV*£a^a:»y*£fT^ (2100), &T&^y h ^Tgft 
V^«iV>^(i^5:z:mb (2110), *IUt0>#C!>^y MC&LT3 0 6 Ofr 
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*><D#kmfrt>X!MZW)i8L-? a 2 1 0 0T£T&£y ^*^ffi3I#jS$7l / £§£• 
W^ 2*n#gh^oTt>*&#£JR*JBfc<fe«>, 2*(-n)£SlD$ 0 ^ES/rT* U*f& 
38&T% l 2* (-n)£f!t£sz:i: fc^Lv^ (3 12 0) 

. ££#PJ6U:GD#-£tt (2130) , Pfc^S (2140). -j& 

2 0 2 o<Dm&m&®%mi.* msiznkt&nz. (3 

[0 0 0 6] 

^IC, £1" x©PiC*f1-£fJ&£4 0 2 OT-#*b5 0 ^E> UgHt&gftJBti 

*n-l£&$|TS (4 0 4 0) . »«±ffi£? h*^®{C 1 #£oTV***^ 
frfcH^ (4 0 5 0), 1 tffioT^lf, x aod P(=A) fcWJC^C (4 0 7 0 
K fcfy N<ZHSt#0T*&4ltf, l&H*iiUS (4 0 6 0). 1&5HC 
5«iI4 0 6 0(t JfJHt*C#»&#*jfev*0T», JtiimK*m?6»*tt 
#8&«TtBT-&S„ 4 0 7 O0«iafx aod P ®4ftflft«JtiRtCttjg 3*l£(DT\ 
33fc7* y^*filK:«e*BriBtt««**. t^y h©&a& 1 \Zv hTiz&mv ( 
3 0 8 0), STffi^*; h*-Cfc£»;*vvo*fc**»£a:, 8**^*1, (3 0 

90) , m&<»!k<!>\zv hommzfit>. ST&tfy KtTcitfKTo&M 

[0 0 0 7] 

Ofc^fc, P^^SfH^it^^gi^gljjfc^g^^y ^^^^ 

[0 0 0 8] 
[&#Jtffl?tfct/i: 3 £. l/TV^S^S] 
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m^nnxmrnt^^mt. m2K.*-t&$\zx &p(Dm&&® (20 1 0) © 

te<B«£ x<k P Ttt, x mod p=p £fc»J x>kp4>4§£tt. x 

mod p=0fcfc»K /J^fcteiifcSZl^&S,, x mod p ©Htfpfc^lStfc LX± 

mm&&. 5i2bitss0^iK^Mv^*iT^s)p, lomw&MKmwtftmx 
jvt^s. mmm&PbLKiuwv-ftzt^ N/p«g£ictm»rft-e<&s0> 

£ «fc tfS fi IC g§ -T 5 © 7? * £ . 
[000 9] 

x mod p ftEfctfJfrfciriC. 2*(m+n) mod p L < tt. 2* (2n) mod p&&£>* 
CttxICfcCTiSih 2*(-n)%,t<tt, 2'(-i)&ii;t > 2*n x mod p 

tC*!C&6©T», 2"(-m)mod p %> L < 2" (-n) mod p Mf#4t$.' 

2*n x mod p ®H» % A^Jx^pOifi^tCfeS^^^x^p^^/Jxgg^Jc^Lfe 

ffl<&*£fc£fctt*8£-£-*\ 2*m x mod p©tfy h£ttp©^«y h*C£v*«fcfc 

5. Ife^oT, y-^«**^xi:p©^/jHW«Sr*)t1-*ri:*«^iBi:*y 
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[0 0 10] 

*yj*vM&mw.zm^&^mntiz&, mmmnftM.®&&^ (2-(-n))*( 

2*n-l) mod p &J££, 2*n mod p ZmCfc&WZtitiEt Z Z£T\ lELV^H 
[0 0 11] 

2) mod p£m£5„ »&*»Ca& R*(-2m) mod p £ffgLTfc£. &&lCR"(-(2" 
m)+l) mod p trfkKXmfcLX%iL\i\ 
[0 0 12] 

[?SE©£l6«>7£Jg] 

x0>te»|tC&Mfcfcf»/ nfcPOfcjjmc&llfct^y OSx^P 
*QT?&£©T% Mm^ni^S, 0=2*U_SQR=2* (2n)U mod PftftULf 

S (503 0). U_SQR=2*(2n)U mod P«:tf-»1-^aJ^(3D#|a&«ia7n- S:® 
07T*tt, 2*L*U mod P 0fm#Jitf j*3*lT tf, L=2nfcUT\ 
07©#l3g£flI^S;i£:#T?t.5. U.SQROtfy h^tt. m-2nt> L < ttn©-^ t»© 
gl^Ol^y h^lCfcS,, 5 0 4 OCDff&tt, 

A_R = (x * 0_SQR + M*p ) / 2*m (5$ 3) 

fcfcU, x<2*«u M<2*mT&5©f, 

A_R < U.SQR + p (£4 ) 

V&&nVXTT'lb&0>T'* A_RCDtf »y hJUi, MAX(m-2n % n)£;& 

»-2n < n (£5) 
■ < 3n (^ 6) 
T* 6. ®S©t&£\ «=2n<3n T-&6©T% A_RCD£>y HSttnt* 
5 0 5 0©&3l£fT 5 0 4 0®fflI»«Tt«;5^I^6 

. » < 3n ©fc#fc»fcsfcv**^cw:, meizmtMonmwizz&ifmzft 
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( A_R + (-A_R*p'(-l) mod 2*n) * p ) / 2*n (5$ 7) 

A_R < 2*n fr-D (-A_R * p* (-1) mod 2*n) < 2*n T*fo&<?)X% 

( A_R + (-A_R*P (-D »od 2*n) * p ) / 2*n < 1+p (5$ 8) 

W 50 5 0<DjEM<D&<D A_R « pfilTfcfcU* nfcfy h^T'^T't 
5. 5 0 5 OT*A_R0Mitfp£4SL x0ft#p00H8ir£fcs£.£ 

5 0 3 o^e> 5 0 5 0 t-e<Dmmz&iKT'&m?6t. 



A_R = x * 2*(2n) * 2* (■) * 2" (-n) * 2(-n) nod P (3; 9) 

= x * 2' (2n+o-m-n) nod P (^10) 
= x « 2*n nod P (^11) 



5 0 5 ovmomm&s ®3©3 o so&m&ykmtm-x&z. xamitpv 

f8S£:&oT^S#-£\ 612*0)2 13 0, 2 1 4 0(D«taiCTSi^»{C|fiES 
• [0 0 13] 

yu-KU-oX, U'_SQR=2*(n+«)U «od (6 0 3 0) . 6 04 OJg* 

^(D^m^n^rz^iZitV _SQR<Difv hjRttBjTFT* U'_SQR 
tti^Tnkry hJ£tT£fc£. 6 0 5 OCD&STttU 

( A_R + (-A_R*p"(-l) nod 2*») * p ) / 2*m <5£l 2) 

A_R < 2'n fro (-A_R * p* (-1) sod 2*«) < Z'm X&ZOiX'* 
( A_R + (-A_R*p*(-l) aod 2*») * p ) / 2*n < 1+p <5$ 1 3 ) 

^1»6 0 5 0 (D%m<Z>&<D A_R p#Ti:fc»;> nl^y h^^3^T?§ 
6. 6 0 5 OTAJltfHBtfpfc^s I, xCDffitf 
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6 0 3 0>e> 6 0 5 OtT'Omm* 1 oOSt^t^t, 

A_R = x * 2" (n+m) * 2* (m) * 2* (-m) * 2(-n) mod P (^14) 

= x * 2* (n+a+a-a-a) aod P (j£ 1 5 ) 

= x*2*n«odP (^16) 

6 0 5 0£m<D%m\Z. S3 ©3 0 5 0 &>&<D#im.tm-T*&2> a x©fl|#p<& 
te&tt£?T^Zm&* 02 #0)2 1 3 0, 2 1 4 0 0)&gfCT£&&fC||tlE3 

®50>mMMtm%*). ■ < 3n £VNe>&#«<&gfc^. 
[0 0 1 4] 

05, meiZBi'ftZmMmiZ&mt^ 2*L*U aod P&ffgf 
JCssf. S7<D#j«{iTfi^y h^e>©rf^ S/3>^-x>f >JCJ:»J, »:=2*L*R 
■od PfcttmbTV^. W©|0Mffi{i, mlfy MCJfc£SJ&T*, w= 2 * (2* 
m) aod PfcfcS<BlC-T6„ L £ 2 xiSt^Lfei: £ iC, S±ffiJW^©^-y Ntc 

7 0 0 5). 70 1 0(D®ltt, P©*±ffiir* htfm<Z)£±ftfcf»/ hfcfigi: 

702 0, 703 0, 704 0, 70 50O«iI«, W©£± 

^xy*£frV> (7 0 6 0) *LTH*»^tt. Bg&auKD^&^x y * L (7 
0 8 0), YKlL©3i(f»©^hK:«a-r*«*«c*»|SnTV^ 

©T*, WJCY&JfcS (7 0 9 0) M*t«±ttlfvMC*-e»LT 
L©«Tffiify Mft*ci*«as**-xy*&fTH (7 0 7 0) 

Mo^ofe#-^tt|^iS[Y{CW©ffl$:«#t-S. uia>||fc?x9?L (7 100 

) , M±&VW<nVy hT?l36«J±U«)TMo^ofcS^tt, YKW©<fl£ttAL 
(7120), aultCl (7 1 3 0). 7 1 2 0 ©fltgti, ##YIC 
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©WtfHtfcSS* (7110). R^iJ^e^ttW^^^^^USI^MIWT'ff^ 

(7140), L£l l^y h^lC$/7 hL (7150), 7 0 6 0«t&6>4&ifc 

7 14 0© Y*Y*2*(-a) mod p (Off Wit. 

(A*A+M*p)/(2*a) (5*17) 
fc^LV*. ZZX\ 

M=-Y*Y*(p*(-l).)Bod 2'a < 2*a (5$1 8) 

(Y*Y+M*p)/(2'a) < (Y*Y+2*a*p)/(2'a) (5*19) 

Y<2*(a-s) (S20) 

Y<=2*(«-s)-l (^2 1) 

(Y*Y+2"«*p)/(2*B)<=((2"(B-s)-l)*2+2"B*p)/2*» (S2 2) 



7 1 4 O0>(Y*Y+M*p)/2*B0>8gi£j|Ui, l El^Hf S r i: IC&± 
&©0T'&Stf>y h s[t+l]:=2s[t]-li:«;S e ftot, 2* (m-2s)#pj; »j 

ti§IffgL&&£&±&fre>j£gH-£O0>fcry hjRtt, s[0]*2'(t 
-Dmt&V. 2*(m-2s)tfp£y%/Jx3<fc*U;£, Ify h^tt p IZ <fcoT&££*i 
So 8 0 2 0, 8 0 3 0, 8 04 0, 8 0 5 0 <DymT*%L±.$L<D 2 My Mi 0 {C 
i?j££*l£<Z>T', s[0]=2£fc*J, t@8 1 4 0 &^ff Lfcffe©ey hfJttt, a-2*t 
%L<«ni;fcS 0 ttDIUKtti, t=log2(L)T*&3©T*, fcf y hSttt, aax(a 

-L, n)£&& B 

[0 0 15] 



=2* (a-2s)-2* (l-s)+2* (-a)+p 
<2*(a-2s)+p+l 



(5*23) 



(5*24) 



9 
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D-tCftoT, 2* n nod P£fH$ U R£f£ (8 0 2 0) . AjfrxlCRfc 
(803 0) . S^tCMiE^ff^fefeOS.ITOTAL^tfgLI-S (8 0 4 0) 

&&<DT\ ¥#>ttWLTft&LTm^X*>&\\ mteOftW?&* £-f2'(-n)no 
d P £ Tgioj CD#HlCti!oTffgU RJNVfc U R33<fctfR_INV&7t;K0 1 
10>#JttCt£oT, (R_INV)-(2'n-l) nod P fcffgU R.ITOTALfrSo il?£© 

ffiSSr^-tn-l&^f S (8 0 5 0) „ JggLtffifcf y hfr&JRIC 1 tfSfcoTV* 
S^if^^SrH^ (8 0 6 0), 1 tffiotV>*ltf, xR nod P(=A_R) fciCJRB 
(4 0 8 0), ^^h©i^07?ifc*itf, 1 SrS*t-5R$:SICS (8 0 7 0) 
. tfy hO&g&l ify hTtc#S»L (8 0 9 0) , ftTtttfy h 
7l/fe»'ftfnrfl (8 100) , fcTffilfv h**&3#fc£*J*V*TVtfc 
*i«6tt, (8 110) . h©&«£fT^. 8 0 7 

0, 8 0 8 0<D$imT-\mi%(Dtm£}t'<Z>t.&-f R#*EhfcfHc*C«>*l.&fc 
ft, lTfi!^'yh*t«ia^7Lfci^l R'(2'n-l)#&#»C*C&4i*£ 
fclCfcS. ^lC3|IUe>*lfeR*(2'n-l)©^»«:^»JK<feibtC, £&{CR_IT0T 
AL (8 2 1 0) 

[0 0 16] 

09 tt, * ■ 8 ®£Jg|g(fi0> 8 0 2 0T»2"L «od P£ftg-rSM3©-HI6fllT* 
09 0>3MR«T&k^ h^e>©7^ S/a>*x-f y, R:=2*L mod 

PftffJIl/T^*. L&23ia^l/fei:ttc, *±|fc#*«Dtfy Mcitf&v^ 

h^S{Cl^Mo^ofc*^^S:^t-^Sti»ulS:fliSL/, 0 tC$0fl§ft L T J5 < ( 
9 0 0 5) . lk\ZR*2-ZlBimt-?Z> (9010). 9BM»m±M\£v KtCStL 
fcl&^O^xy *£*t<^ (9 0 6 0) 5tUT^S#-&tt, SEIS:»ul©#S:^x«y 
91 (9 0 80) . lT-&*Ui, YICL©^*©^^ NlCffl^-fSijg^^jrtS 
*IT^5©T, RICY&ISS (9 0 9 0) mmttZ. &±®.ify htZtT'tm 
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#itLTV*fc^#£-tt, L©£T&fcr*y hftgfC 1 fc-SA^x y # ftffv\ (9 
0 7 0) Jloa>ofc«£tt£jRYlC##-f£. aultfMgft^xy^l, (9 100 
) , i±TO©^y K*l*«tti;ftTIo^ofcS^tt, YCRtfHfftftAL 
(9120), »uUcl ftgjTtS (9 1 3 0). 9 1 2 0©«LSti> **Y(C 
lftftALTfctY: =Y*R£ff-||-f*~i;i:^U\, 9 1OO0fx 

y*T*, -tT'lzm&zm±l$L!Zft0*y h7:*l#j|o*>oT^S#£-a:, Y(7>« 
C$!£<Z>RtfHIft3tCS (9110). R<BS5&B££tf£L (9140), L 
ft 1 \Z*J h#2?2/7 K Lfctf)^ (9150), ##9 0 6 0 j^O&JlJCJiS. 
[0 0 17] 

m 1 0 tt, ®8 0HJg«|cfiCD 8 0 4 0 T*R_INV:=2* (-n) mod SffiS 

»J, R_INV:=2"(-L) tod PtfWLt^*. L ft 2 *ft*3| L Ac £ £ K, S±& 

±&ey h^tci iifcSt^y N*fc&S»£lctt, &tf»T'SI3Lft*Te»&g#ifc£ 

. 0lZWm<tLT3S< (1 0 0 0 5) . fclCRft l/2T'SJ88fc**-£ (1001 
0) . i/2fc$gaBfcfSlca:, l ft l Ete*/? h*fttfj:v*# % i&^7h 

1-eilOtC^Sfc*, i1 , PftiUX.T^e>*i/7hftf?^o PCDffitt^^^jR 

7 h#pf||T-&£. ^ff£«JI#*_Lttlf<y MC&L£BgSfrGD^x>y*ftfT^ ( 
1 0 0 6 0) MLT^Zm^lt. ^StnuKiDfflft^xy^L (1 0 0 8 0), 1 

KYft^C (1 0 0 9 0) JgjfctfS. &±ffitf», hCSTUMjWtLT^fcV* 

s±&##<z>t^y h{fcg{ci#&«5av^x»,*ftifyvN (1 0070) ^ 

YlC##1-£„ oulO-filft^x^^ L (9 100) , M±,& 
&>A<D\£y htl^iCfttlo^ofei^li. Y»CR0#ftf^AL (9 120 
) , aul{Cl ftfg^-TS (9130). 912 O0fc3ltt, #5fcYKl ftftAL 
TlSgY : =Y*Rt.$i&1'&z£il%bi,\ 9 1 0 0 ©*x y * X\ * 

T*lcii*{cS±ffi^©^y NT i#)io*>oT^a^§£ii, Y<©-fiiK:^©R 
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(omzmvz (9iio) 0 R<Dm&sm*itg.L ouo), l& i \±v v 

ft%i/7 h Ltz.<D*> (9150), UXf9 0 6 0 fre>0&3lCM<5. 
[0 0 18] 

01 Hi, MS <?>mt&W*<n 8 0 4 0 T*R_ITOTAL:=(R_INV)' (2*n-l) nod P£ 

ft2ttz>tttm(D-mmMT'$>z> a ^2 e ess* * sic, R_iNV(2* n 

){CR&^1*Sri:^j:ytf^. R_INV(2'n)tt, »*B3|lft*& nBfcyig'f i 

(R_INV)*(2*n-l) mod p= R_INV(2*n) * R_INV" (-1) aod P (^2 5) 

= R_INV*(2*n) * R nod P (^2 6) 

ft. R_ITOTAL£R_INVT*ta»ftl, (110 10), -Dg\zm&&m&.£fi$m 
8n&£&ilCftA (1 1 0 2 0), R_ITOTAL(Dil^i^tfeHS:R_ITOTALtC^ 
AL (1 1 0 3 0) , •h*jy*mmSLiftb 1 (1 1 04 0) , %Vy* 

I8Ritf>|t#0 <fc*J *>;*;$tt*U£ (1 1 0 5 0), 1 1 0 3 0*»e>©&JI£l|y 
iB*. S^tCR$:R_ITOTALfCif^mmLfe#?:R_ITOTAUC^AL (1 1 0 6 0) 

#HH: 

1. &N±T-©gm*C;}5V*T, #8g»JC&£^£&N£;£v*C3&fcte&*£SIIL 

2. i£N±T'©jW5fcftlMc33^T, e>rt^ifrN£;£^iCiiifc|i&/<£ 

o 

3. ^^if^Uja^^g^Wt, P&5ft&£U x>PT*&SxlC*fbT, 
x * (2 " n) mod P *mi?-£ft&&Jl3£SlcJH.T. fc&P, AiHf £x 

mt£\Zv b&Zmt. U A#ffi&x * (2*n) nod P(C^H^- SfiglC, 2*( 
2m+n) aod P£ft#f £*\ Wi^&M&LT ^ > if ;* U il&fgg 
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mm\Z&*) x 1 =x * 2 * (2 m+n) * (2* (-m) ) nod P= x * 2 * ( 
m+n) ood P£ff£U 3e>£x 2 : =x 1 * (2 \ <-m) ) nod P= x * 
(2*n) nod PZifntZZtiZZ *J, x mo&?*®iZ#tb&Zt.lRUZx 

* (2 * n) »od p ztt&t&ztz&mttzmnimmn. 

4. PZm&£L* x>P^&£xtC#l,T, x* (2 * n) mod P &ffg^ 

^^8Sn, A#ISx£&*rtafc&tC&g;5:t^y h^fcmi; U A:ftte£ 
x* (2 * n) nod PfC2g&-*Sl£lC, 2 * (2 m+n) mod ?ZftmtZ1>\ 
V^i^ftM&LTfcS. ^^rr^UJW^fHWlC^Ux^x* 2 * (2 m+n) 

* (2* (-m) ) mod P=x * 2 * (m+n) mod PfcffgU £e>£x2: 
= xl* (2* (-m))»odP=x* (2 * n) mod P&ffliLf ££££ <fc y 
. x mod P&miZT&lto&ZtmLlZx * (2*n) mod P *if#?& Z £ 

5. *>3*vM&m&mnziiL. pzmmtb* x>p-c&&xizmi,t* 

x* (2 * n) mod P £ftg*Sff$g*|lJIgglc;&V^ &£P, A#fi£x 
, &P£teM1-£fc&tC&i^#fcfc?«, h&£n, A#llx &&||l!rr 
gfcl^y h«£m£U AJjUZx * (2*n) mod ?\Z&mt ZtiSiiZ* 2*( 
m+2n) mod p£ffg-r&^, &£v\« ; ?«>M;tLTfc£» ^ > rf * y m&&M 
SSfilCj: y x 1 = x * 2 * (m+ 2 n) * (2 * (-m) ) mod P= x * 2 * ( 
2 n) mod PfcfmU SfclCx 2 : =x 1 * (2 " (-n) ) mod P=x * ( 
2 " n) mod P£ff-|£1-££i:tCj:y > x mod Pfc&fC^&SZtaBLKx * 

(2 - n) mod p zttBtzzzzftuttzmm&mmm. 

6. PfeffRfcU x>Ptfc5xCjltU, x* (2 * n) mod P 

&mmmmi;mizte^T. &&p, a^sx, mp&%m?ztztbiz&mftft 

&t?yh8t£n, A;*H!x Z%m?&t-to\Z&m*Xy b&Zmt U A*H«: 
x * (2 * n) mod P££&1-S|£lC, 2 * (m+2n) mod P^It****, 
^»^«>B;&LTJ3£, *y3*VMAXmtttZ*Vx l=x*2 " (m+ 2 
n) * (2 * (-m) ) mod P= x * 2 " (2 n) mod PfcttJtU S&JCX2 
:=xl* (2* (-n))modP=x* (2*n) mod Pfcttg-tS^C «fc 
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*K x ood PimiZXtoZZtMUZx * (2*n) nod P & 

^h^otyeLTsi^vy hm^^mw^m^mbx. x-d mod 
K©ise©jiiS[S:d[i] ttfe^t, x * d m aodpfcgiirr £ftb»;tc (2 - 

n) - (2*s-l) *x*d[i]mod PfcM^TiiJ* (2 " n) * (2 
-n-1) *x"d mod P£fH!tLfc&, 2" (-n) * (2*n-l) 
mod P^iCT. x"d mod P &Z.£Z®mt*Zi?m&m 

8. &£P, A#te£x, SPSrl&W-rsfcfetC^JI^^^y hgtSrn, A* 

y N^ofcUEUTs K#©^^m?ai!C«)J|gmS:^LT, x*d mod 

WLO) i#i 0«St$:d [i] x * d [.i]«odP&&g-f £ftfc»JK: (2* 

n) * (2*s-l) *x*d[i]«od ?*m^XW.%*fi\\ (2*n) * (2 
*n-l) *x*d mod P£ffirLfc&, 2* (-n) * (2*n-l) 
mod P&ftt, x*d mod PZtmirZZ Zftmmm 

urn. 

[0 0 19] 

i£lC«fc£tf-£H|©x mod PWy b&]S£TfJ\$ >^tfx>f h (US: 2ii 
»*9ILfe»&IC UCfcoTV*6tfy SCDjR) Sr^-T. rg[ i 3 j «#38l$ilCfc 
US, x mod PICi§fSx • 2 " n mod P<Z>£»; hg&tf/\* > 
y hS:^"r. HI ZXitXtl^-^omtx mod P CDS 
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mi] 

mw<D rsamc r TWMttom7 a -. 

[02] 

[03] 

[04] 

[05] 
[06] 
[07] 
[08] 

*»wtcj:s, t^7^t s^&snr&n© -%mm. 

[09] 
[010] 

[0i i] 
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[@12] 

[®i 3] 
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CH13 



i 

Cp:=(x mod P) dP raod P 



1/ 



1010 



Cq:=(x mod Q^mod 0 

■ i 

C:={(Cp-Cq)0 -, inodPl xO+Cq 



^1020 
%2/1030 



BO 



1 
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( W=x<^ rood PtPftir ) 

■ — 1 



R:=2 n mod P 
R^r^mod P 



^ 2030 i 

ft/ » 

2040 > 



Ag^-AxR^xR-'mod P 




2200 



W:=WxRxR-inod P 



I 



W:=WxAnXR-»ciod P 



J 



21 




£0^ 

NO 



YES 



2120 
2130 



R:=f xR-'mod P 



1 



2110 




i^xwx irWi p 

i 



KO 



YES 



=i — 



2140 



1/ 



(return w) 
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[04] 



( B=x* rood Pflft* ) 




( RETURN ) 
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[05] 



(A^xRrod P<Pft»(1)) 



Ui^mod P 
U 8qr :=2 2n U mod P 



I 



✓2/5030 



Ar:=x • • U^mcd P 2x 5040 



V=*r "^mod P 
(R := 2 n mod P) 



I 



^2/5050 



[2050^fit<] 



[06] 



06 



(Ar=xR mod PcPtttK2)) 



U:=2 m mod P 
u 'sqr :=2,W " UD « )d|, 



„ 6030 



A^xxU' 8qr xU- 1 mod P 2/ 



I 



6040 



ARisA^x^aiod Pp2/ 
I 

(20502*7) 



6050 



5 
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C®7] 



( W:=2Ml mod P(Ptt» ) U:^ 



nul:=0 ^/ 7005 



7010 



W: =2 x(2«"— Zbn-^p) 



W:=W-2 {m - n) P 




7030 



"2/ 



7050 



YES 



Y:=W ' 


7120-fYis 


rail :=1 


Y:=WYir^niod P 







7090 



»:=*YU-»mod P 



7140 



(RETURN j ) 



Y:=YYU-'mod P 



7150\^L:=L»1 



U-' := 2 -1 " mod P 



6 
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IMS) 



ma 



( mod P<Pfr» ) 

^802o" 



R^^od P 



T 



Ar:=x R modP p2/ 8030 

^2/8040 



R,BV=2" n mod P 

R|TOTAL : =<Rnw) 2 ' , " , IWW P 




8200 

***** 



,8090 



8210 
8110 




(RETURN w) 



8220 



7 
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09 



( R:=2«- mod POfrg ) 
H — OQ05 




nul :=1 



~j »130j 9110 



R:=RY mod P 



9140 



( RETURN R ) 



R:=R*Rmod P 



9150vn|L:=L»1 
"IZZ 
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CHI 0] 



1 0 



(^=21 mod PPftjQ 



«ul:=0 




«ul:=1 



toito 



-i10090 
r iw :s *iiwY nod 



3 



10140 



(return r„/) 



R iiw := Riiiv* Y,nod P 



10150 \^ L:=L»1 

— IZZ 



9 
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[01 1] 



1 1 



(R llw :grtBod POtfjQ 



11010 



11020 



R ITOTAL :-R IHV 

3Z 



I :=n 



11030 



M\ R 



M TOTAL ^ITOTAL**IT<mil 



11040, 



I 



V> i:=i-1 



11050 



11060- 




Mn| R|T0TM. :=ft *R|T0TAL P 



(RETURN R itotal ) 



1 2] 



1 2 



x mod p ©e^hfifcitf/NSl/^X-fh 



250 
200 
150 
100 
50 
0 * 





— 1 






• 

♦ 






• 










m* oOp 


• * 

o . 


« oa o a<, ° 
o o " 

. a a 


• .On 0~ 

8o 0o ° 

,Q°. i _. i_, jl i i_ 



50 100 150 200 250 
x mod p ©fcfrvl-fi 



1 0 
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1 3] 



01 3 

x-2 n mod p 0>t??t-£&£tf /\5^>X«<K 



250 
200 
150 
100 
50 



~ g 5f 



50 100 ISO 200 250 
x mod p ©fcfs/hft 



1 1 
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ess*] wmm 

mm 

mm: Ksm^vmmmn&mtvT. tpmAm^m^m^tt^m^ 

xnodp S:ii[^ffSCii"riC» ra5j lC^1-<fce>lC2*(«+n) B0<i 
P %>L<«U 2*(2n) nod p£&e>#£&x£^CTfct, 2*(-n)fcL< 
tt, 2'(-«)£^CT, 2"n x mod p fcftgte. U »&!ll£S:MVx.5$ 

M&mM<D&&lZ* (2*(-n))"(2*n-l) mod p &mC*ilE-*£. 
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$#£lFffi&©## #12 0 0 3-0 1 4 1 3 6 

£tf#^ 50300100380 

mA&%±.m 0097 

#l£B ¥^15^ 1/124 0 

• #amt «> 
csmH] y-ms* 1^230 



1 
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ffi m a m & m n 



(000005 1 0 8) 
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